Bug#894577: CVE-2016-5397

2018-04-01 Thread Moritz Muehlenhoff
On Sun, Apr 01, 2018 at 10:52:59PM +0200, László Böszörményi (GCS) wrote: > Hi Moritz, > > On Sun, Apr 1, 2018 at 10:38 PM, Moritz Muehlenhoff wrote: > > Package: thrift-compiler > > Severity: grave > > Tags: security > > > > This was assigned CVE-2016-5397: > > https://issues.apache.org/jira/br

Bug#894577: CVE-2016-5397

2018-04-01 Thread GCS
Hi Moritz, On Sun, Apr 1, 2018 at 10:38 PM, Moritz Muehlenhoff wrote: > Package: thrift-compiler > Severity: grave > Tags: security > > This was assigned CVE-2016-5397: > https://issues.apache.org/jira/browse/THRIFT-3893 This affects the Go compiler component only if I see it right. That's pack

Bug#894577: CVE-2016-5397

2018-04-01 Thread Moritz Muehlenhoff
Package: thrift-compiler Severity: grave Tags: security This was assigned CVE-2016-5397: https://issues.apache.org/jira/browse/THRIFT-3893 Fix: https://github.com/apache/thrift/commit/2007783e874d524a46b818598a45078448ecc53e Cheers, Moritz